Traffic Trace Info
DumpFile: 200804271400.dump
FileSize: 1198.05MB
Id: 200804271400
StartTime: Sun Apr 27 14:00:01 2008
EndTime: Sun Apr 27 14:15:01 2008
TotalTime: 900.01 seconds
TotalCapSize: 941.42MB CapLen: 96 bytes
# of packets: 16818123 (7950.37MB)
AvgRate: 74.09Mbps stddev:13.64M
IP flow (unique src/dst pair) Information
# of flows: 767235 (avg. 21.92 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.3% 1.8% 1.7% 1.6% 1.4% 1.2% 1.2% 1.2% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 456832
Top 10 bandwidth usage (bytes/total in %):
6.1% 6.1% 5.1% 4.4% 3.7% 3.7% 3.5% 3.4% 3.3% 2.2%
# of IPv6 addresses: 1764
Top 10 bandwidth usage (bytes/total in %):
19.4% 9.5% 8.9% 8.9% 7.4% 6.7% 6.2% 5.8% 4.6% 3.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200804271400.pktlen.png)
detailed numbers
[ 32- 63]: 2865503
[ 64- 127]: 6925624
[ 128- 255]: 1163333
[ 256- 511]: 693053
[ 512- 1023]: 495382
[ 1024- 2047]: 4675228
Protocol Breakdown
![[protocol breakdown chart]](200804271400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 16818123 (100.00%) 8336567087 (100.00%) 495.69
ip 16800017 ( 99.89%) 8333030300 ( 99.96%) 496.01
tcp 13164295 ( 78.27%) 7400010816 ( 88.77%) 562.13
http(s) 3449655 ( 20.51%) 4571286496 ( 54.83%) 1325.14
http(c) 1988614 ( 11.82%) 199152672 ( 2.39%) 100.15
squid 1096698 ( 6.52%) 363631582 ( 4.36%) 331.57
smtp 578443 ( 3.44%) 78486471 ( 0.94%) 135.69
nntp 13 ( 0.00%) 1506 ( 0.00%) 115.85
ftp 106393 ( 0.63%) 61262230 ( 0.73%) 575.81
pop3 7252 ( 0.04%) 2285137 ( 0.03%) 315.10
imap 5374 ( 0.03%) 1193018 ( 0.01%) 222.00
telnet 821 ( 0.00%) 72696 ( 0.00%) 88.55
ssh 1366693 ( 8.13%) 306079331 ( 3.67%) 223.96
dns 12765 ( 0.08%) 4728952 ( 0.06%) 370.46
bgp 220 ( 0.00%) 68313 ( 0.00%) 310.51
napster 2 ( 0.00%) 126 ( 0.00%) 63.00
realaud 12 ( 0.00%) 800 ( 0.00%) 66.67
rtsp 193485 ( 1.15%) 187274536 ( 2.25%) 967.90
icecast 429 ( 0.00%) 32900 ( 0.00%) 76.69
other 4357422 ( 25.91%) 1624453810 ( 19.49%) 372.80
udp 2509412 ( 14.92%) 829538904 ( 9.95%) 330.57
dns 1255066 ( 7.46%) 247924120 ( 2.97%) 197.54
realaud 10758 ( 0.06%) 11476288 ( 0.14%) 1066.77
halflif 8 ( 0.00%) 968 ( 0.00%) 121.00
starcra 12 ( 0.00%) 1182 ( 0.00%) 98.50
everque 5212 ( 0.03%) 4065849 ( 0.05%) 780.09
unreal 25 ( 0.00%) 4407 ( 0.00%) 176.28
quake 114 ( 0.00%) 7511 ( 0.00%) 65.89
cuseeme 2 ( 0.00%) 231 ( 0.00%) 115.50
other 1237223 ( 7.36%) 565984629 ( 6.79%) 457.46
icmp 1115015 ( 6.63%) 102033568 ( 1.22%) 91.51
ipip 328 ( 0.00%) 41304 ( 0.00%) 125.93
ipsec 1008 ( 0.01%) 146072 ( 0.00%) 144.91
ip6 645 ( 0.00%) 81146 ( 0.00%) 125.81
other 9314 ( 0.06%) 1178490 ( 0.01%) 126.53
frag 5232 ( 0.03%) 3999463 ( 0.05%) 764.42
ip6 18106 ( 0.11%) 3536787 ( 0.04%) 195.34
tcp6 2283 ( 0.01%) 344761 ( 0.00%) 151.01
http(s) 14 ( 0.00%) 1276 ( 0.00%) 91.14
http(c) 381 ( 0.00%) 40119 ( 0.00%) 105.30
smtp 373 ( 0.00%) 143064 ( 0.00%) 383.55
pop3 16 ( 0.00%) 1853 ( 0.00%) 115.81
ssh 48 ( 0.00%) 7008 ( 0.00%) 146.00
bgp 93 ( 0.00%) 12210 ( 0.00%) 131.29
other 1358 ( 0.01%) 139231 ( 0.00%) 102.53
udp6 10924 ( 0.06%) 2575127 ( 0.03%) 235.73
dns 8891 ( 0.05%) 1922912 ( 0.02%) 216.28
starcra 1 ( 0.00%) 137 ( 0.00%) 137.00
other 2032 ( 0.01%) 652078 ( 0.01%) 320.90
icmp6 4867 ( 0.03%) 610952 ( 0.01%) 125.53
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 2 ( 0.00%) 1867 ( 0.00%) 933.50
tcpdump file: 200804271400.dump.gz (434.38 MB)